$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: Xoz/D81tdgxdMfYCtlSMwrjiLLm8m/VncQIhj23DqYg= Subject key identifier: 90:2D:A4:84:D9:94:3F:F9:B2:7F:E6:2F:22:89:32:F8:B8:0F:0E:69 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019CE5FFAECBE06DE93F6E38644D7E8A5C46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1526 Signing time: Fri 13 Mar 2026 07:01:04 +0000 Manifest this update: Fri 13 Mar 2026 07:01:04 +0000 Manifest next update: Sat 14 Mar 2026 07:01:04 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (hash: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU=) 3: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 4: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 5: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 6: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 7: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: EakwD6n0OR7mNaXFzNvwo1Tb8eYv08qExpUHyJpcNyk=) 9: lWg7vkHZKoUTr9NcDvXsJHiO9NI.roa (hash: hnXLBiYzcA6j2q9gin73kUQrdgupmbTcJczhf1x1FMQ=) 10: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 11: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 12: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 14 Mar 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:e5:ff:ae:cb:e0:6d:e9:3f:6e:38:64:4d:7e:8a:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Mar 13 07:01:04 2026 GMT Not After : Mar 14 07:01:04 2026 GMT Subject: CN=902da484d9943ff9b27fe62f228932f8b80f0e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:ef:32:78:7a:ea:52:b8:ce:fd:ba:85:f3: 44:74:79:e7:c6:87:19:4c:fc:db:f7:1e:83:9c:9e: 9e:df:88:1f:aa:e3:f2:3f:42:ac:84:ed:c7:28:ea: db:ec:f0:9f:a1:b0:19:ef:bc:72:bc:cc:5c:80:75: 02:17:ee:31:6a:20:2e:e0:64:a2:99:42:79:ac:ae: b2:34:62:0d:89:b4:4d:79:91:ac:a5:06:3a:be:8a: 10:ba:e8:8a:66:db:5f:50:80:70:cb:75:1d:cc:06: b1:10:16:0a:23:7e:39:41:e4:3f:e4:76:cd:22:33: db:bb:d4:76:fb:9f:eb:2b:ff:c1:02:a9:5c:ce:30: 88:c4:f5:af:42:89:7e:1d:d5:66:32:2e:60:31:6b: ee:1f:87:c5:2a:4c:15:eb:18:65:f0:da:7f:dc:75: 57:bb:46:d3:09:8e:b3:00:7c:1c:f5:c6:bf:91:86: ae:9a:88:44:16:2c:f8:f2:8b:e8:f0:72:96:74:ac: 01:4c:02:fd:64:b1:e7:c3:04:82:c3:d6:96:64:4e: 55:51:3b:1f:e9:e8:b0:b3:d0:d9:c1:11:d2:d9:1d: d4:76:b9:60:59:07:10:47:f3:c3:cc:93:8e:26:2d: a9:28:35:35:2c:ad:d8:89:14:c3:4b:a6:a9:21:61: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2D:A4:84:D9:94:3F:F9:B2:7F:E6:2F:22:89:32:F8:B8:0F:0E:69 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:d5:97:0d:59:5c:cc:dd:fb:8c:48:3c:a0:4a:c3:f6:4a:bf: fa:ce:dc:d7:bc:a7:4d:87:b5:99:dd:79:c0:76:49:c1:6f:60: d7:49:5c:02:2e:b7:24:73:6d:12:9d:93:c7:36:3e:18:11:aa: 66:ab:51:19:85:d5:1e:46:53:3f:ea:a2:a3:82:78:12:03:42: 85:dc:fb:8a:1c:c8:96:8c:f2:b1:2f:3f:f4:14:04:1f:02:f9: 1e:b2:43:50:15:23:af:f5:a6:a3:13:6e:f3:97:0d:7e:03:69: 69:fd:bd:ee:1d:cb:be:31:ee:2f:74:7a:af:5a:c3:c7:dd:db: ae:8c:5f:e8:cc:68:e6:37:ce:9f:e5:2a:64:77:d4:12:ba:e0: 66:23:d0:cf:cf:e4:9e:1b:61:dc:1c:4a:56:a3:7e:92:d3:cd: ac:4c:f2:84:5d:fc:1e:4f:ee:70:a0:f9:3d:b0:c0:83:bb:a7: b7:b3:73:d5:a1:a1:fd:6a:c0:0c:b0:84:9f:20:a8:d2:93:2c: a9:f7:fc:98:43:ed:3d:b9:04:4f:de:57:74:ee:d1:c9:90:12: 84:ed:4a:d9:df:2b:5f:60:87:4e:ec:9b:7d:47:58:e4:60:ef: bf:5f:a6:f8:9a:4e:2b:96:7c:61:a4:21:d7:71:95:c1:22:34: 00:28:bc:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZzl/67L4G3pP244ZE1+ilxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMzEzMDcwMTA0WhcNMjYwMzE0MDcwMTA0WjAzMTEwLwYDVQQD Eyg5MDJkYTQ4NGQ5OTQzZmY5YjI3ZmU2MmYyMjg5MzJmOGI4MGYwZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEHvMnh66lK4zv26hfNEdHnnxocZ TPzb9x6DnJ6e34gfquPyP0KshO3HKOrb7PCfobAZ77xyvMxcgHUCF+4xaiAu4GSi mUJ5rK6yNGINibRNeZGspQY6vooQuuiKZttfUIBwy3UdzAaxEBYKI345QeQ/5HbN IjPbu9R2+5/rK//BAqlczjCIxPWvQol+HdVmMi5gMWvuH4fFKkwV6xhl8Np/3HVX u0bTCY6zAHwc9ca/kYaumohEFiz48ovo8HKWdKwBTAL9ZLHnwwSCw9aWZE5VUTsf 6eiws9DZwRHS2R3UdrlgWQcQR/PDzJOOJi2pKDU1LK3YiRTDS6apIWHXXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAtpITZlD/5sn/mLyKJMvi4Dw5pMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxNWXDVlc zN37jEg8oErD9kq/+s7c17ynTYe1md15wHZJwW9g10lcAi63JHNtEp2TxzY+GBGq ZqtRGYXVHkZTP+qio4J4EgNChdz7ihzIlozysS8/9BQEHwL5HrJDUBUjr/WmoxNu 85cNfgNpaf297h3LvjHuL3R6r1rDx93broxf6Mxo5jfOn+UqZHfUErrgZiPQz8/k nhth3BxKVqN+ktPNrEzyhF38Hk/ucKD5PbDAg7unt7Nz1aGh/WrADLCEnyCo0pMs qff8mEPtPbkET95XdO7RyZAShO1K2d8rX2CHTuybfUdY5GDvv1+m+JpOK5Z8YaQh 13GVwSI0ACi80A== -----END CERTIFICATE-----Generated at Fri Mar 13 10:52:58 2026 by rpki-client